Higher Education

Any idea why Apple TV's are showing up under the SmartDevice catagory instead of Home Audio/video Equipment?

Unfortunately Apple uses the same DHCP fingerprint, OUI blocks and operating system on the Apple TV and it will sometimes get profiled as a generic iOS device.

How can we reliably get appletvs profiled? They require specific inbound permissions and therefore specific policy enforcement, so it's necessary to profile these correctly. Advice?

===========
Ryan Holland
(sent while mobile)

We have not found and distinct profile information on many models. The general recommendation has been to leverage Device Registration or use EAP-TLS on these devices and leverage certificate properties for policy.

For device registration though, how do we ensure the device being registered as an AppleTV is actually an AppleTV?
For EAP-TLS, what methodology do you recommend to create a certificate for the device with the appropriate properties since the AppleTV cannot “click through” any on boarding workflow?

In policy, you can leverage the IF-MAP data that will confirm it's an Apple TV and compare that to how it was registered.

For the certificate piece, university ATVs can be enrolled using Apple Configurator.

What about student or faculty owned devices?

Bruce Osborne
Sent from my iPhone

You can just leverage device registration with AirGroup for the personal devices.

Does that verify it is an Apple TV?

Bruce Osborne
Sent from my iPhone

You would let the use register it as a media player and then in policy verify the profile and IF-MAP data. This is a common deployment.